Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Palo Alto Networks — Vulnerabilities & Security Advisories 364

Browse all 364 CVE security advisories affecting Palo Alto Networks. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Palo Alto Networks operates as a prominent cybersecurity vendor, primarily providing next-generation firewalls, cloud security solutions, and endpoint protection platforms to enterprise clients. The company’s software ecosystem, particularly its PAN-OS operating system, has historically been associated with a significant volume of Common Vulnerabilities and Exposures, currently totaling 280 recorded instances. These vulnerabilities frequently involve remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from input validation errors or improper access controls within management interfaces. While the firm maintains a robust security posture through regular patching cycles and proactive threat intelligence integration, the high CVE count reflects the complexity of its extensive feature set and the broad attack surface inherent in critical infrastructure components. Major incidents have been limited, with most issues resolved via timely updates, though the sheer number of disclosed flaws underscores the challenges of securing large-scale, continuously updated network security appliances.

CVE ID Title CVSS Severity Published
CVE-2024-5915 GlobalProtect App: Local Privilege Escalation (PE) Vulnerability — GlobalProtect App CWE-732 7.8AI High AI 2024-08-14
CVE-2024-5914 Cortex XSOAR: Command Injection in CommonScripts Pack — Cortex XSOAR CommonScripts CWE-77 9.8AI Critical AI 2024-08-14
CVE-2024-5913 PAN-OS: Improper Input Validation Vulnerability in PAN-OS — PAN-OS CWE-20 6.1 Medium 2024-07-10
CVE-2024-5912 Cortex XDR Agent: Improper File Signature Verification Checks — Cortex XDR Agent CWE-347 8.4AI High AI 2024-07-10
CVE-2024-5911 PAN-OS: File Upload Vulnerability in the Panorama Web Interface — PAN-OS CWE-434 6.5AI Medium AI 2024-07-10
CVE-2024-5910 Expedition: Missing Authentication Leads to Admin Account Takeover — Expedition CWE-306 9.8AI Critical AI 2024-07-10
CVE-2024-5909 Cortex XDR Agent: Local Windows User Can Disable the Agent — Cortex XDR Agent CWE-269 7.8AI High AI 2024-06-12
CVE-2024-5908 GlobalProtect App: Encrypted Credential Exposure via Log Files — GlobalProtect App CWE-532 5.5AI Medium AI 2024-06-12
CVE-2024-5907 Cortex XDR Agent: Local Privilege Escalation (PE) Vulnerability — Cortex XDR Agent CWE-269 7.0AI High AI 2024-06-12
CVE-2024-5906 Prisma Cloud Compute: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface — Prisma Cloud Compute CWE-79 4.8AI Medium AI 2024-06-12
CVE-2024-5905 Cortex XDR Agent: Local Windows User Can Disrupt Functionality of the Agent — Cortex XDR Agent CWE-346 7.1AI High AI 2024-06-12
CVE-2024-3400 PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect — PAN-OS CWE-77 10.0 Critical 2024-04-12
CVE-2024-3388 PAN-OS: User Impersonation in GlobalProtect SSL VPN — PAN-OS CWE-269 4.1 Medium 2024-04-10
CVE-2024-3387 PAN-OS: Weak Certificate Strength in Panorama Software Leads to Sensitive Information Disclosure — PAN-OS CWE-326 5.3 Medium 2024-04-10
CVE-2024-3386 PAN-OS: Predefined Decryption Exclusions Does Not Work as Intended — PAN-OS CWE-436 5.3 Medium 2024-04-10
CVE-2024-3385 PAN-OS: Firewall Denial of Service (DoS) when GTP Security is Disabled — PAN-OS CWE-20 7.5 High 2024-04-10
CVE-2024-3384 PAN-OS: Firewall Denial of Service (DoS) via Malformed NTLM Packets — PAN-OS CWE-1286 7.5 High 2024-04-10
CVE-2024-3383 PAN-OS: Improper Group Membership Change Vulnerability in Cloud Identity Engine (CIE) — PAN-OS CWE-282 7.4 High 2024-04-10
CVE-2024-3382 PAN-OS: Firewall Denial of Service (DoS) via a Burst of Crafted Packets — PAN-OS CWE-770 7.5 High 2024-04-10
CVE-2024-2433 PAN-OS: Improper Privilege Management Vulnerability in Panorama Software Leads to Availability Loss — PAN-OS CWE-269 4.3 Medium 2024-03-13
CVE-2024-2432 GlobalProtect App: Local Privilege Escalation (PE) Vulnerability — GlobalProtect App CWE-269 4.5 Medium 2024-03-13
CVE-2024-2431 GlobalProtect App: Local User Can Disable GlobalProtect — GlobalProtect App CWE-269 5.5 Medium 2024-03-13
CVE-2024-0011 PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal Authentication — PAN-OS CWE-79 4.3 Medium 2024-02-14
CVE-2024-0010 PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in GlobalProtect Portal — PAN-OS CWE-79 4.3 Medium 2024-02-14
CVE-2024-0009 PAN-OS: Improper IP Address Verification in GlobalProtect Gateway — PAN-OS CWE-940 6.3 Medium 2024-02-14
CVE-2024-0008 PAN-OS: Insufficient Session Expiration Vulnerability in the Web Interface — PAN-OS CWE-613 6.6 Medium 2024-02-14
CVE-2024-0007 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Panorama Web Interface — PAN-OS CWE-79 6.8 Medium 2024-02-14
CVE-2023-6793 PAN-OS: XML API Keys Revoked by Read-Only PAN-OS Administrator — PAN-OS CWE-269 2.7 Low 2023-12-13
CVE-2023-6791 PAN-OS: Plaintext Disclosure of External System Integration Credentials — PAN-OS CWE-701 4.9 Medium 2023-12-13
CVE-2023-6789 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface — PAN-OS CWE-79 4.3 Medium 2023-12-13

This page lists every published CVE security advisory associated with Palo Alto Networks. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.